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DETAILED ACTION 
Response to Arguments 

1 . Applicant's arguments filed June 9, 2008 have been fully considered but they are 
not persuasive. Applicant argues that Stefik fails to teach or disclose a certification 
component or an access component. However, Stefik teaches a Master repository that 
issues Identification certificates (column 51, lines 9-13, column 13, lines 13-15). Stefik 
also teaches a repository that defines core functionality in support of usage rights 
(column 51, lines 39-43). Stefik goes on to explain how the repository requires a digital 
certificate to be able to gain access to a piece of work (column 7, lines 20-24). 

Election/Restrictions 

2. Applicant's election of claims 1-11 and 30 - 41 in the reply filed on December 
18, 2007 is acknowledged. Because applicant did not distinctly and specifically point 
out the supposed errors in the restriction requirement, the election has been treated as 
an election without traverse (MPEP § 818.03(a)). The initial acknowledgement of timely 
traversal was incorrect as the traverse failed to distinctly and specifically point out the 
supposed errors in the restriction requirement. 

3. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 
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Claim Rejections - 35 USC § 102 

4. Claims 1 - 8, 11, 30, 31, 34 and 36 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Stefil< et al's US Patent 6,959,290 B2. Referring to claim 1, Stefik 
teaches: 

a. A certification component that generates certificates for local domain 
automation devices (column 51, lines 9-13). 

b. An access component that establishes rules of use for automation device 
services based at least upon the identity of a user or entity as provided by a 
certificate (column 51 , lines 39-43). 

5. Referring to claim 2, Stefik teaches that the system is executed remote from the 
automation device (column 41, lines 23-24). 

6. Referring to claim 3, Stefik teaches that the communication occurs over a LAN 

(column 14, lines 50-51). 

7. Referring to claim 4, Stefik teaches that the communications are secured using 
digital certificates which bind public keys to specific entities to facilitate decryption of 
messages as well as authentication of the sender (column 51, lines 5-8). 

8. Referring to claim 5, Stefik teaches that the message is digitally signed to enable 
the message to be authenticated (column 51 , lines 5-8). 

9. Referring to claim 6, Stefik teaches that access to the access component is 
restricted to a particular user or group of users via certificates (column 12, lines 33-36). 

1 0. Referring to claim 7, Stefik teaches that the devices includes an access 
credential component which defines and restricts access to particular objects and 
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services based on tlie identity of the user as established by the certificate (column 7, 
lines 20-24). 

1 1 . Referring to claim 8, Stefik teaches a virtual key component adapted to retrieve 
identifying information from a certificate (column 26, lines 35-38). 

12. Referring to claim 1 1 , Stefik teaches that the automation device includes an I/O 
device (column 7, lines 55-57). 

1 3. Referring to claim 30, Stefik teaches: 

c. Encrypting a message to be sent to a automation device utilizing a key 
(column 27, lines 7-9) derived from a certification component (column 27, lines 8- 
9). 

d. Transmitting the encrypted message to the automation device (column 27, 
lines 19-20). 

14. Referring to claims 31 and 36, Stefik teaches: 

e. Receiving an encrypted message from an automation device or device 
controller (column 27, line 21). 

f. Locating a certificate component associated with the automation device 

sending the message (column 27, lines 21-23). 

g. Decrypting the message utilizing the public key provided by the certificate 
component (column 27, lines 26-27). 

15. Referring to claim 34, Stefik teaches searching the local device store (column 27, 
lines 21-23). 
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Claim Rejections - 35 USC § 103 

16. Claims 9 and 10 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Stefik as applied to claims 1 and 7 above, and further in view of Asunmaa. 

1 7. Stefik discloses all the limitations of the parent claims, using a key component to 
retrieve identifying information (column 26, lines 35-38), and embedding the repository 
in a card (column 16, lines 2-3). Stefik does not explicitly disclose the card being a SIM 
card. However, Asunmaa discloses using a SIM card to authenticate a user (page 4, 
paragraph 59). Stefik and Asunmaa are analogous art because they are from the same 
field of endeavor, authentication. At the time of the invention, It would have been 
obvious to one of ordinary skill in the art, having the teachings of Stefik and Asunmaa 
before him or her, to modify the card of Stefik to include the SIM card of Asunmaa. The 
suggestion/motivation for doing so would have been to have reliable authentication of a 
data terminal (page 4, paragraph 59). 

18. Claims 32, 33 and 37 - 41 are rejected under 35 U.S.C. 1 03(a) as being 
unpatentable over Stefik as applied to claims 30 and 31 above, and further in view of 
Forth. 

1 9. Referring to claim 32, Stefik discloses all the limitations of the parent claims. 
Stefik does not explicitly disclose that the automation device Is an industrial PLC. 
However, Forth discloses using an industrial PLC to store instructions to perform I/O 
control (page 2, paragraph 25). Stefik and Forth are analogous art because they are 
from the field of Endeavor, input/output. At the time of the invention, it would have been 
obvious to one of ordinary skill in the art, having the teachings of Stefik and Forth before 
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him or lier, to modify the input/output system of Stefik to include the industrial PLC of 
Forth. The suggestion/motivation fordoing so would have been to provide increased 
versatility and additional functionality (page 2, paragraph 22). 

20. Referring to claim 33, Stefik discloses that the message is a program (column 42, 

lines 17-18). 

21 . Referring to claims 37 and 41 , Stefik discloses: 

h. Generating a digitally signed message component comprising a message, 
a message digest, a certification component, and hash function data, wherein the 
message component is generated by a first industrial automation device (column 
42, lines 11-20). 

i. Transmitting the message component to a second industrial automation 
device (column 42, lines 11-12). For the requestor to receive the message, 
another requestor would had to have transmitted it. 

22. Stefik does not explicitly disclose that the automation device is industrial. 
However, Forth discloses using an industrial PLC to store instructions to perform I/O 
control (page 2, paragraph 25). Stefik and Forth are analogous art because they are 
from the field of Endeavor, input/output. At the time of the invention, it would have been 
obvious to one of ordinary skill in the art, having the teachings of Stefik and Forth before 
him or her, to modify the input/output system of Stefik to include the industrial PLC of 
Forth. The suggestion/motivation fordoing so would have been to provide increased 
versatility and additional functionality (page 2, paragraph 22). 
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23. Referring to claims 38 and 39, Stefik discloses encrypting the message prior to 
transmission (column 42, lines 11-16). 

24. Referring to claim 40, Stefik discloses authenticating the message by retrieving a 
hash function in accordance with the hash information (column 42, lines 11-15), 
generating a message digest by applying the retrieved hash function to the received 
message and compahng the generated message digest with the message digest 
retrieved from the message component (column 42, lines 17-20). 

25. Claim 35 is rejected under 35 U.S.C. 103(a) as being unpatentable over Stefik as 
applied to claims 30 and 31 above, and further in view of Meffert. 

26. Stefik does not explicitly disclose downloading the certificate. However, Meffert 
discloses downloading the certificate and private keys (page 11, paragraph 109). Stefik 
and Meffert are analogous art because they are from the same field of endeavor, digital 
rights management. At the time of the invention, it would have been obvious to one of 
ordinary skill in the art, having the teachings of Stefik and Meffert before him or her, to 
modify receiving the certificate of Stefik to include downloading the certificate of Meffert. 
The suggestion/motivation for doing so would have been to be able to identify the rights 
set and match the certificate to the private key (page 1 1 , paragraph 109). 

Conclusion 

27. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 
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A shortened statutory period for reply to this final action is set to expire THREE 

MONTHS from the mailing date of this action. In the event a first reply is filed within 

TWO MONTHS of the mailing date of this final action and the advisory action is not 

mailed until after the end of the THREE-MONTH shortened statutory period, then the 

shortened statutory period will expire on the date the advisory action is mailed, and any 

extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 

the advisory action. In no event, however, will the statutory period for reply expire later 

than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to CORDELIA KANE whose telephone number is 
(571 )272-7771 . The examiner can normally be reached on Monday - Thursday 8:00 - 
5:00 EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. 



/C. K.I 

Examiner, Art Unit 2132 
/Gilberto Barron Jr/ 

Supervisory Patent Examiner, Art Unit 2132 



